Marwood SchoolAssociation

Privacy notice

Draft template. The committee should review this before launch.

Marwood School Association (registered charity 1010419) is the data controller for information collected on this website. We keep it to the minimum we need.

What we collect and why

  • Account: your email, first name and, for parents, each child's first name and year group. We use this to let you sign in, vote, say who's coming to events and volunteer, and to send MSA news if you opt in. Only the committee sees children's first names (to plan numbers for events); we never publish them, and votes are only counted by year group.
  • Linked parents: if you link your account with another parent's (both of you have to say yes), you share your children's names and years and each event's booking: who's coming, the forms signed for it and what's been paid. Either of you can unlink at any time.
  • Paying and giving online: done on JustGiving, who have your card details and send you the receipt; we never see them. For an event, we keep how much your family paid and when (so the committee knows who's paid at the door), with a reference code that doesn't say who you are. Gift Aid declarations made on JustGiving are kept by JustGiving, who claim it for us.
  • Ideas you suggest: your first name, role and optional email, so we can tell you what happens to your idea. Your name is only shown publicly if you tick the box.
  • Without signing in: if you like an idea or tap Interested / Going, we store a random “this device” code in a cookie so we can remember your choice and let you undo it. It contains no personal information. If you later sign in on that device, your choices move into your account.
  • Pages visited: we record which pages are opened and when, so we can see what's useful and fix what isn't. If you're signed in this is linked to your account; if not, we only keep a code that changes every day and can't identify you (no cookie). Only the site administrator can see it, and it's deleted after a year.
  • Event forms: some events have a form for parents to fill in and sign (for example permission, medical needs and an emergency phone number). Only the committee sees them, and every signed form is deleted automatically a month after the event.
  • Getting connected: if you ask to be put in touch (New parents page), we keep your name, email, optional mobile and your children's year groups, and share them only with the parent who looks after that year's messages.
  • Votes: the committee sees totals and turnout, not who voted for what.
  • Committee tools: tasks, receipts and expenses entered by volunteers for running the charity.

Photos

We only publish photos of children where the school holds photo consent, and never with names.

Who we share it with

Our service providers: Vercel (hosting), Neon (database), Resend (email) and JustGiving (payments and donations), plus HMRC for Gift Aid claims. We never sell your data.

How long we keep it

Accounts are kept until you ask us to delete them or your family leaves the school. Gift Aid records are kept for 6 years, as HMRC requires.

Your rights

You can ask to see, correct or delete your data at any time by contacting the committee via the About page.